Computer Hope
Software => Computer viruses and spyware => Topic started by: globalpal_ooty on February 11, 2009, 04:36:31 AM
-
Hi,
My CD Drive opens and closes automatically n frequently. Every 10 seconds or so, it opens and closes without me operating it. I went through some forums suggesting that it may be a trojan or a virus. My AVG antivirus does not show me if there are any viruses. Is it the problem of my CD drive or do I have any virus. What's the problem with my CD drive? How do I rectify it?.
DVD-CDRW - LG
Operating system - Windows XP
-
This is usually the cause of a virus, most likely a 'Joke' program.
Otherwise, there may be a script running.
Post a HijackThis log.
Download and install HijackThis
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
Install it, run a scan ONLY, and post the log.
-
Attached logfile of highjackthis...
[attachment deleted by admin]
-
At least can somebody tell me if my system is affected with any virus. Attached log file of hijackthis.
Suddenly my CD drive goes crazy, opens and closes suddenly every 5 min or so. Have anybody experienced this??? Any solution.. Really getting irritated..Not able to write a CD fully neither do I able to see a movie CD fully...Help Pls.........
-
Do you have another CD drive that you could swap in there?
It could just be a problem with the drive itself.
-
At least can somebody tell me if my system is affected with any virus. Attached log file of hijackthis.
Suddenly my CD drive goes crazy, opens and closes suddenly every 5 min or so. Have anybody experienced this??? Any solution.. Really getting irritated..Not able to write a CD fully neither do I able to see a movie CD fully...Help Pls.........
I don't see anything eye-catching in the hijackthis log.
Could be a defective drive.
-
do you think bad power flow could be a part here?
-
do you think bad power flow could be a part here?
hmm, that's a good question, but I would say insufficient or too much power would simply fry the drive, not screw around with it's tray motors.
-
Thanks for your replies. I'll check my power supply too, though I have connected my CPU via UPS. I recently changed my SMPS. Is that causing a trouble with my CD drive?? I don't really think it's a virus bec CD drive opening and closing does not happen all the time. For the past 2 days the frequency of this have changed.
Does the small light (LED) on the CD drive glow on all the time?? When the small light is switched off, I am not facing this problem.
-
That light should only come on when you press the button.
-
do you have another drive that you try to see also if its not faulty or a power issue?
-
umm, i would be reconing that you have a virus. I was experimenting with a copy of "tukojan" once, and i installed it to one of my cruddy pc's. The funny thing is the cd drive kept on popping out every 15 secs lol. So yeah, i would personally stay away from free virus scanners as most of them arn't that great, if you can't afford to buy something like trend micro, then just use nod32 or avast's free versions.
-
i would personally stay away from free virus scanners as most of them arn't that great
Avira, Avast, Nod32, AVG, and a few others are a billion times better then Norton or Mcaffee AVs...
just took a double take of the hijackthis file... and this caught my eye:
O4 - HKCU\..\Run: [mpx] c:\WINDOWS\system32\mpx.exe
anybody know what this is or what it does?
you might want to start a topic in the malware forum.
-
Will check it with someother antivirus.......but strage thing is I cannot see anything under my naked eye of anything running in background. And the important thing is, I copied some datas n softwares, transferred to my friend's systems, but that computers does not get affected.
Can the Administrator move this topic to the "Computer viruses and spyware."
-
sorry didnt think of that.
-
I know a VBS script that does it on a loop, and it made my computer sound like a hurricane and crashed it!
-
Done.
-
??? I thought that you could only run c code and get it to do that stuff.
-
Prepare a boot able floppy.
Boot from the flippy.
Let it sit for 10 minuets and see if the CD opens by itself.
-
O4 - HKCU\..\Run: [mpx] c:\WINDOWS\system32\mpx.exe
anybody know what this is or what it does?
Trojan.Virtumonde - http://www.threatexpert.com/report.aspx?uid=01feba93-ac5e-4014-b820-dc737f5d1e0a
We need to remove the malware first but honestly the CD tray sounds like a dist problem to me. Some argue it can't carry a current but I think it's been proven it can.
@globalpal_ooty - I suggest uninstalling the Paretlogic Driver Cure. (Unless it's a paid version). This company isn't trusted.
Open HijackThis and select Do a system scan only.
Place a check mark next to the following entries: (if there)
- O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
- O4 - HKCU\..\Run: [mpx] c:\WINDOWS\system32\mpx.exe
Important: Close all open windows except for HijackThis and then click Fix checked.
Once completed, exit HijackThis.
----------
Go to Start > Run and type notepad.exe then click OK
Copy and paste the below into Notepad and save as fixme.reg to Your Desktop
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentVersion\Run]
"Alcmtr"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"mpx"=-
Locate fixme.reg on your Desktop and double-click it. Answer Yes when prompted to merge with the Registry.
Make sure that you tell me if you receive a success message about adding the above to the registry. If you do not get a success message, it did not work.
Delete the fixme.reg from the Desktop.
----------
Download ComboFix© by sUBs from one of the below links. Be sure top save it to the Desktop.
Link #1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link #2 (http://subs.geekstogo.com/ComboFix.exe)
**Note: It is important that it is saved directly to your Desktop
Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting ComboFix.
Temporarily disable your antivirus, and any antispyware real time protection before performing a scan. Click this link (http://www.bleepingcomputer.com/forums/topic114351.html) to see a list of security programs that should be disabled and how to disable them.
Double click combofix.exe & follow the prompts.
When finished ComboFix will produce a log for you.
Post the ComboFix log in your next reply.
Important: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.
Remember to re-enable your antivirus and antispyware protection when ComboFix is complete.
If you have problems with ComboFix usage, see How to use ComboFix (http://www.bleepingcomputer.com/combofix/how-to-use-combofix)